aboutsummaryrefslogtreecommitdiff
path: root/manifests/tlspolicy.pp
blob: fb7020dafd7d139247dd375118590ca2234f29ae (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
#
# == Class: postfix::tlspolicy
#
# Manages Postfix TLS policy by merging policy snippets configured
# via postfix::tlspolicy_snippet defines
#
# Parameters:
# - $postfix_tls_fingerprint_digest (defaults to sha1)
#
# Note that this class is useless when used directly.
# The postfix::tlspolicy_snippet defines takes care of importing
# it anyway.
#
class postfix::tlspolicy {

  # Default value for parameters
  case $postfix_tls_fingerprint_digest {
    "": { $postfix_tls_fingerprint_digest = 'sha1' }
  }

  include common::moduledir
  module_dir{'postfix/tls_policy': }

  $postfix_tlspolicy_dir          = "${common::moduledir::module_dir_path}/postfix/tls_policy"
  $postfix_merged_tlspolicy       = "${postfix_tlspolicy_dir}/merged_tls_policy"

  concat { "$postfix_merged_tlspolicy":
    require => File[$postfix_tlspolicy_dir],
    owner   => root,
    group   => root,
    mode    => '0600',
  }

  postfix::hash { '/etc/postfix/tls_policy':
    source    => "$postfix_merged_tlspolicy",
    subscribe => File["$postfix_merged_tlspolicy"],
  }

  postfix::config {
    'smtp_tls_fingerprint_digest': value => "$postfix_tls_fingerprint_digest";
  }

  postfix::config { 'smtp_tls_policy_maps':
    value   => 'hash:/etc/postfix/tls_policy',
    require => [
                Postfix::Hash['/etc/postfix/tls_policy'],
                Postfix::Config['smtp_tls_fingerprint_digest'],
               ],
  }

  # Cleanup previous implementation's internal files
  file { "${postfix_tlspolicy_dir}/tls_policy.d":
    ensure  => absent,
    recurse => true,
    force   => true,
  }

}